CVE-2024-57241

The repository contains a functional exploit for CVE-2024-57241, demonstrating command execution via crafted HTTP requests to an OpenCode server. The script includes session handling and command injection to achieve RCE.

This PoC demonstrates an open redirect vulnerability in DEDECMS 5.71SP1 and earlier versions by exploiting a logic error in the CMS that fails to validate GET request inputs. The script reads target URLs from a file and tests for the vulnerability by appending a malicious redirect link.